bowenliang123 commented on code in PR #4266:
URL: https://github.com/apache/kyuubi/pull/4266#discussion_r1100945685


##########
.github/workflows/dep.yml:
##########
@@ -57,3 +58,7 @@ jobs:
           -pl kyuubi-ctl,kyuubi-server,kyuubi-assembly -am
       - name: Check dependency list
         run: build/dependency.sh
+      - name: Dependency Review
+        uses: actions/dependency-review-action@v3
+        with:
+          fail-on-severity: low

Review Comment:
   The docs of action does not clarify how it classify the level of severity, 
so I prefer to keep it in `low` the same as the default value. We could lower 
this level if necessary in future, as it only affects future PRs.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to